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WHATIS CLAIMED IS: 



A packet processor comprising: 
a control unit having a data input path; 



at least one encryption unife 
a first authentication unit; \ 
a second authentication unit; \ 



a local data path, independent of the data input path to the control unit, coupling the 
control unit to each of the encryption and authentication units; and 

a second data path from the encryption unit to each authentication unit, including a data 
path from the first authentication unit to the second authentication unit. 



2. A packet processor as recited in claim 1, wherein said data input path of the 
control unit is coupled to a processor bus and each of said encryption and authentication units 
comprises a data input path coupled to the processor bus. 



3. A packet processor as recited in claii^i 1, wherein said data input path of the 
control unit is coupled to a processor bus and each of^said encryption and authentication units 
comprises a data input path to the processor bus and means for reading and writing data on the 
processor bus. 



4. A packet processor as recited in claim 1 , wherein said second data path comprises 
a daisy-chain connection between the encryption and authentication units. 
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1 5r A method of processing data packets comprising: 

2 ^ coupling a control unit to\a first data path; 

3 receiving first and second data packets in the control unit from the first data path; 

^4 providing a plurality of processing units in data communication with the control unit over 

^5 a second data path, independent of th^ first data path, said processing units including at least one 

6 encryption unit and at least one autheirtication unit; 

7 providing data of the first data packet from the control unit to one of the processing units, 

8 over the second data path; \ 

9 processing said data from the first\data packet with said one of the processing units to 

10 provide output data for the first data packet from said one of the processing units; 

1 1 communicating said output data for the first data packet from said one of the processing 

12 |£j units to another of the processing units for further processing; and 

■ ' \ 

13 yj providing data from the second data packet to said one of the processing units, while said 

ru \ 

14 m other processing unit further processes the output data for the first data packet. 

I \ 

LJ \ 

1 fy 6. A method as recited in claim 5, wherein said one of the processing units 

2 ^ comprises an encryption unit and said other of said\)rocessing units comprises an authentication 

3 U unit. \ 

\ 

1 7. A method as recited in claim 5, wherein said at least one authentication unit 

2 comprises a first and second authentication units. \ 

1 8. A method as recited in claim 5, wherein said step of communicating the output 

2 data from one of the processing units to another of the processing units comprises 

3 communicating said output data over a daisy-chain connectionwetween said processing units. 
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6 



9/ A method of processing data in a computer, the method comprising the steps of: 
^performing encryption on a first dat\packet; and 
after completion of the encryption of\the first data packet, 

performing authentication of the first data packet, and 
performing encryption of a second e^ata packet prior to completion of 
authentication of the first data packet. 



1 10. The method of claim 9, wherein the authentication is a first authentication, further 

2 comprising the step of performing a second authentication on the first data packet of data. 

1 ~ 11. The method of claim 1 0, wherein the fiist authentication is performed on the 

2 encrypted first data packet. 

; a : 

j 5 £ 
ffl 

1 fU 12. The method of claim 10, wherein the firsi| authentication appends data to the 

2 0 encrypted first data packet. 

3 s - 

1 q 13. The method of claim 12, wherein the second authentication is performed on the 

2 M encrypted first data packet and the appended data. 



1 14. The method of claim 10, further comprising the step of performing the encryption 

2 of the second data packet after beginning the second authentication of the first data packet. 
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\y A method of processing data in a computer, the method comprising the steps of: 
-encrypting a first data packet with an encryption module; 
authenticating the encrypted first data packet with a first authentication module; 
encrypting a second data packet with me encryption module while authenticating the first 
data packet with the first authentication module; and 

authenticating the second data packet witii the first authentication module. 
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10. An apparatus for processing data, comprising: 

'a computer having a data storage device connected thereto, wherein the data storage 
device stores a data; 



one or more computer programs, performed by ^he computer, for performing encryption 
on a first data packet, and, after completion of the encryption of the first data packet, performing 
authentication of the first data packet, and performing enqfyption of a second data packet prior to 
completion of authentication of the first data packet. 



17. The apparatus of claim 16, wherein the authentication is a first authentication, 
further comprising means for performing a second authentication on the first data packet of data. 



1 18. The apparatus of claim 1 7, wherein the first aut 

2 encrypted first data packet. 



entication is performed on the 



1 .19. The apparatus of claim 17, wherein the first authentication appends data to the 

2 encrypted first data packet. 

1 20. The apparatus of claim 19, wherein the second a thentication is performed on the 

2 encrypted first data packet and the appended data. 
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21 . The apparatus of claim 17, further comprising the means for performing the 
encryption of the second data packetyafter beginning the second authentication of the first data 
packet. 

22; An apparatus for processing data, comprising: 
/ a computer having a data storage |pice connected thereto, wherein the data storage 
device stores a data; 

one or more computer programs, pm<^rmed by the computer, for encrypting a first data 
packet with an encryption module, authenticating the encrypted first data packet with a first 
authentication module, encrypting a second oat^acket with the encryption module while 
authenticating the first data packet with the first authentication module, and authenticating the 



second data packet with the first authentication iWdule. 



2l/. An article of manufacture comprisingVcomputer program carrier readable by a 
comjrfxter and embodying one or more instructions executable by the computer to perform 
method steps for processing data, the method comprisin^he steps of: 
performing encryption on a first data packet; and 
after completion of the encryption of the first data packet, 

performing authentication of the first data packfet, and 
performing encryption of a second data packet prior to completion of 



authentication of the first data packet. 



\ 



\ 



24. The article of manufacture of claim 23, wherein the authentication is a first 
authentication, further comprising the step of performing a second\authentication on the first data 
packet of data. 
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25. The article of manufacture of claim 24, wherein the first authentication is 
performed on the encrypted first data packet. 

26. The article of manufacture of claim 24, wherein the first authentication appends 
data to the encrypted first data packet. 

27. The article of manufacture of claim 26, wherein the second authentication is 
performed on the encrypted first data packet and the appended data. 

28. The article of manufacture of claim 24, further comprising the step of performing 
the encryption of the second data packe\ after beginning the second authentication of the first 
data packet. \ 

29. An article of manufacture comprising a computer program carrier readable by a 



committer and embodying one or more instructions executable by the computer to perform 



method steps for processing data, the method comprising the steps of: 

encrypting a first data packet with an encryption module; 

authenticating the encrypted first data packet with a first authentication module; 

encrypting a second data packet with the encryption module while authenticating the first 
data packet with the first authentication module; andu 

authenticating the second data packet with the ttirst authentication module. 





^0. A method of processing data packets comprising: 
coupling a control unit to a first data path; \ \ 

receiving a first dat packet in the control unit from the\first data path; 
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providing a plurality of processing units in data communication with the control unit over 
a second data path, independent of the finst data path, said processing units including at least one 
encryption unit and at least one authentication unit; 

providing data of the first data packef from the control unit to multiple processing units, 
over the second data path; 

processing said data from the first data^packet with said multiple processing units in 
parallel. 



31. A method as recited in claim 30, wherein said plurality of processing units 
comprises at least one encryption unit and a pluralitwpf authentication units. 
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